ASP.NET Core Ditches CSRF Tokens for Fetch Metadata in .NET 11
.NET 11 introduces an automatic CSRF protection middleware that uses browser Fetch Metadata headers instead of tokens. It's on by default, requires no code changes, and fundamentally changes how cross-site request forgery is handled in ASP.NET Core.
Global Exception Handling in ASP.NET Core with IExceptionHandler
IExceptionHandler gives ASP.NET Core apps a structured, testable, and chainable way to handle exceptions globally — replacing hand-rolled middleware and scattered try-catch blocks with a first-class framework feature.
Security Headers Middleware for ASP.NET Core
Building a comprehensive security headers middleware for ASP.NET Core that covers X-Content-Type-Options, X-Frame-Options, Referrer-Policy, and more.
Rate Limiting Middleware in ASP.NET Core
Protect your ASP.NET Core APIs from abuse using the built-in rate limiting middleware with fixed, sliding, token bucket, and concurrency limiters.
Response Compression Middleware in ASP.NET Core
Reduce bandwidth and improve load times by enabling response compression with Brotli and Gzip in ASP.NET Core.
Custom Middleware Patterns in ASP.NET Core
How to build convention-based and factory-based middleware in ASP.NET Core, including branching, short-circuiting, and testability patterns.
Output Caching in ASP.NET Core
Use ASP.NET Core's output caching middleware to cache entire responses and dramatically reduce server load.
Request Pipeline Short-Circuiting in ASP.NET Core
Learn how to short-circuit the ASP.NET Core request pipeline to return early responses and improve performance.
The ASP.NET Core Middleware Pipeline Explained
Understand how the ASP.NET Core middleware pipeline processes requests and responses through a chain of delegates.